OCI FOUNDATIONS COMPREHENSIVE EXAMS 2025/2026
QUESTIONS WITH ANSWERS RATED A+
✔✔Which of the following statement is true about VCN peering?
A. A VCN peering connection is a networking connection between two VCNs within a
single region.
B. A VCN peering connection is a VPN-based connection.
C. VCN peering does not require using any Gateways, Local or Remote
D. Peered VCNs can exist in different regions. - ✔✔Answer: D
Remote Peering connects VCNs across regions
✔✔You are setting up a proof of concept (POC) and need to cost-effectively establish a
secure connection between an on-premises data center and Oracle Cloud Infrastructure
(OCI). Which OCI service would you use?
A. VPN Connect
B. Service Gateway
C. Internet Gateway
D. FastConnect - ✔✔Answer: A
VPN Connect provides a site-to-site IPSec VPN between your on-premises network and
your virtual cloud network (VCN). It can be used for a proof of concept setup: VPN
Connect is a free service with no port hour charges. Data transfer cost is covered under
networking cloud pricing.
✔✔You are building out a site-to-site VPN connection from an on-site network to a
private subnet within a Virtual Cloud Network. Which of the following might you need for
this connection to function properly?
A. NAT Gateway
B. Service Gateway
C. Internet Gateway
D. Dynamic Routing Gateway
E. VPN Gateway - ✔✔Answer: D
DRG is a virtual router that provides a path for private traffic (that is, traffic that uses
private IPv4 addresses) between your VCN and an on-premises network.
✔✔If you choose to use both Security Lists and Network Security Groups in an OCI
VCN, at what two levels is security functioning? (choose TWO)
A. VPN Level
B. VCN Level
C. Subnet Level
D. Instance Level
E. Gateways Level - ✔✔Answer: C, D
NSG rules apply to an instance (vNIC) while Security Lists applies at the subnet level
(and all instances in that particular subnet). If you choose to use both, a packet is
, allowed if any rule in any of the relevant Security Lists and Network Security Groups
allows the traffic
✔✔Which of the following is NOT true about Oracle Cloud Infrastructure Object Storage
service?
A. Maximum object size that can be stored in OCI Object Storage buckets is 10 TB.
B. Standard Object storage buckets cannot be downgraded to Archive storage.
C. Archive Storage buckets cannot be upgraded to Standard Object storage.
D. Object Storage is eventually consistent. - ✔✔Answer: D
OCI Object Storage supports strong consistency that means that when a read request is
made, Object Storage always serves the most recent copy of the data that was written
to the system.
✔✔You have a requirement to store application backups in OCI for 6-12 months, but
retrieve data immediately based on business needs. Which OCI storage service can be
used to meet this requirement?
A. Object Storage (standard)
B. Block Volume
C. Archive Storage
D. File Storage - ✔✔Answer: A
You can use Object Storage for data to which you need fast, immediate, and frequent
access. You can use Archive Storage for data to which you seldom or rarely access, but
that must be retained and preserved for long periods.
✔✔Which Oracle Cloud Infrastructure storage service can provide a shared file system
across multiple compute instances?
A. File Storage
B. Archive Storage
C. Object Storage
D. Local NVMe - ✔✔Answer: A
Oracle Cloud Infrastructure File Storage service provides shared, scalable, secure,
enterprise-grade storage across multiple compute instances.
✔✔Which storage service offers the lowest pricing (per GB)?
A. Archive Storage
B. Object Storage
C. Block Volume
D. File Storage - ✔✔Answer: A
Archive Storage is ideal for storing data that is accessed infrequently and requires long
retention periods. Archive Storage is more cost effective than Object, Block and File
storage services
✔✔What is the smallest block volume size that can be provisioned on Oracle Cloud
Infrastructure?
A. 1 GB
QUESTIONS WITH ANSWERS RATED A+
✔✔Which of the following statement is true about VCN peering?
A. A VCN peering connection is a networking connection between two VCNs within a
single region.
B. A VCN peering connection is a VPN-based connection.
C. VCN peering does not require using any Gateways, Local or Remote
D. Peered VCNs can exist in different regions. - ✔✔Answer: D
Remote Peering connects VCNs across regions
✔✔You are setting up a proof of concept (POC) and need to cost-effectively establish a
secure connection between an on-premises data center and Oracle Cloud Infrastructure
(OCI). Which OCI service would you use?
A. VPN Connect
B. Service Gateway
C. Internet Gateway
D. FastConnect - ✔✔Answer: A
VPN Connect provides a site-to-site IPSec VPN between your on-premises network and
your virtual cloud network (VCN). It can be used for a proof of concept setup: VPN
Connect is a free service with no port hour charges. Data transfer cost is covered under
networking cloud pricing.
✔✔You are building out a site-to-site VPN connection from an on-site network to a
private subnet within a Virtual Cloud Network. Which of the following might you need for
this connection to function properly?
A. NAT Gateway
B. Service Gateway
C. Internet Gateway
D. Dynamic Routing Gateway
E. VPN Gateway - ✔✔Answer: D
DRG is a virtual router that provides a path for private traffic (that is, traffic that uses
private IPv4 addresses) between your VCN and an on-premises network.
✔✔If you choose to use both Security Lists and Network Security Groups in an OCI
VCN, at what two levels is security functioning? (choose TWO)
A. VPN Level
B. VCN Level
C. Subnet Level
D. Instance Level
E. Gateways Level - ✔✔Answer: C, D
NSG rules apply to an instance (vNIC) while Security Lists applies at the subnet level
(and all instances in that particular subnet). If you choose to use both, a packet is
, allowed if any rule in any of the relevant Security Lists and Network Security Groups
allows the traffic
✔✔Which of the following is NOT true about Oracle Cloud Infrastructure Object Storage
service?
A. Maximum object size that can be stored in OCI Object Storage buckets is 10 TB.
B. Standard Object storage buckets cannot be downgraded to Archive storage.
C. Archive Storage buckets cannot be upgraded to Standard Object storage.
D. Object Storage is eventually consistent. - ✔✔Answer: D
OCI Object Storage supports strong consistency that means that when a read request is
made, Object Storage always serves the most recent copy of the data that was written
to the system.
✔✔You have a requirement to store application backups in OCI for 6-12 months, but
retrieve data immediately based on business needs. Which OCI storage service can be
used to meet this requirement?
A. Object Storage (standard)
B. Block Volume
C. Archive Storage
D. File Storage - ✔✔Answer: A
You can use Object Storage for data to which you need fast, immediate, and frequent
access. You can use Archive Storage for data to which you seldom or rarely access, but
that must be retained and preserved for long periods.
✔✔Which Oracle Cloud Infrastructure storage service can provide a shared file system
across multiple compute instances?
A. File Storage
B. Archive Storage
C. Object Storage
D. Local NVMe - ✔✔Answer: A
Oracle Cloud Infrastructure File Storage service provides shared, scalable, secure,
enterprise-grade storage across multiple compute instances.
✔✔Which storage service offers the lowest pricing (per GB)?
A. Archive Storage
B. Object Storage
C. Block Volume
D. File Storage - ✔✔Answer: A
Archive Storage is ideal for storing data that is accessed infrequently and requires long
retention periods. Archive Storage is more cost effective than Object, Block and File
storage services
✔✔What is the smallest block volume size that can be provisioned on Oracle Cloud
Infrastructure?
A. 1 GB
